How to remove onestart.exe
- File Details
- Overview
- Analysis
onestart.exe
The module onestart.exe has been detected as PUP.OneStart
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
22902ce22d532a5e0236abde0e1083d6 |
| Size: |
3 MB |
| First Published: |
2025-03-07 23:01:30 (6 months ago) |
| Latest Published: |
2025-03-08 23:02:19 (6 months ago) |
| Status: |
PUP.OneStart (on last analysis) |
|
| Analysis Date: |
2025-03-08 23:02:19 (6 months ago) |
Overview
| %localappdata%\onestart.ai\onestart |
| %localappdata%\onestart.ai\onestart |
| %localappdata%\onestart.ai\onestart |
| %localappdata%\onestart.ai\onestart |
| %localappdata%\onestart.ai\onestart |
| %localappdata%\onestart.ai\onestart |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
64 |
| Image Base: |
0x0000000140000000 |
| Entry Address: |
0x001b3fb0 |
| Name |
Size of data |
MD5 |
| .text |
2632192 |
4b3b0c6bfb561fed82f78a4e9a258008 |
| .rdata |
337408 |
fec83586f21878672c75554ea827346e |
| .data |
62464 |
c730be0b853b50f95b87755412104837 |
| .pdata |
63488 |
32a604fe5da4feafa2dd985bfaebd20d |
| .gxfg |
13312 |
0fcbc54c7aad05875f3c432283ace437 |
| .retplne |
512 |
022887b1467ba7c3bd7ed7d98b0a888a |
| .tls |
1024 |
cfe5c1f8a786c28f4aaad328ec7a216d |
| CPADinfo |
512 |
60d3ea61d541c9be2e845d2787fb9574 |
| _RDATA |
512 |
47630ecc88708e7b992ac5960dc2e02f |
| malloc_h |
1536 |
4e982fd2d41fee0ffa46eb1bcb96abf1 |
| .rsrc |
400384 |
b9fd354e8e360940919229c9737eddcc |
| .reloc |
10752 |
fd242ed43e9999e09129344e906cf8c1 |
